In the Linux kernel, the following vulnerability has been resolved:
uio_hv_generic: Fix a memory leak in error handling paths
If 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be updated and 'hv_uio_cleanup()' in the error handling path will not be able to free the corresponding buffer.
In such a case, we need to free the buffer explicitly.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-devel | Aug 2, 2024 | Mar 1, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | May 13, 2024 | Mar 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Mar 1, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 1, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-obs-build | Aug 9, 2024 | Mar 1, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-awsUpgrade linuxUpgrade linux-gcpUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-oracle | Nov 19, 2024 | Mar 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub